
United States Patent and Trademark Office 



UNITED STATES DEPARTMENT OF COMMERCE 
United States Patent and Trademark Office 

Address: COMMISSIONER FOR PATENTS 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
www.uspto.gov 



APPLICATION NO. 



FILING DATE 



FIRST NAMED INVENTOR 



ATTORNEY DOCKET NO. 



CONFIRMATION NO. 



09/746,325 



12/21/2000 



Lanny Gilbert 



36192 7590 05/28/2004 

CANTOR COLBURN LLP 
55 GRIFFIN ROAD SOUTH 
BLOOMFIELD, CT 06002 



36968/248469 



1704 



EXAMINER 



LEZAK, ARRIENNE M 



ART UNIT 



PAPER NUMBER 



2143 

DATE MAILED: 05/28/2004 




Please find below and/or attached an Office communication concerning this application or proceeding. 



PTO-90C (Rev. 10/03) 



UTTICB MCZIOn oUTuTYiBry 


Application No. 

09/746,325 


Applicant(s) / 

GILBERT, LANNY f 


Examiner 

Arrienne M. Lezak 


Art Unit 

2143 





- The MAILING DA TE of this communication appears on the cover sheet with the correspondence address •• 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
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Status 

I )□ Responsive to communication(s) filed on . 
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DETAILED ACTION 



Claim Rejections - 35 USC § 103 



1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Microsoft Passport ™ in view of US Patent 5,966,705 to Koneru. 

3. Regarding Claims 1, 9, 12-14, 16 and 17, Microsoft Passport ™ discloses a 
system and method for providing information on a plurality of requestors over the 
Internet, ("Microsoft Passport: Streamlining Commerce and Communication on the 
Web", October 11, 1999 article - Examiner numbered p. 18), comprising: 



storing information on the plurality of users in a database and associating 
the information with a plurality of keys, (Passports), wherein keys, 
(Passports), are assigned, (created), for the user by an assigning 
functionality, (per pending Claim 17), ("Microsoft Passport is committed to 
Safeguarding Security and Privacy" - Examiner numbered p.13-15); 
receiving a request for information on a particular user from one of the 
requestors over the Internet, ("Microsoft Passport is committed to 
Safeguarding Security and Privacy" - Examiner numbered p.13-15); 
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determining a key corresponding to user data associated with the request, 
(per pending Claim 12), ("Microsoft Passport is committed to Safeguarding 
Security and Privacy" - Examiner numbered p. 13-1 5); 
using the key(s) associated with the request to retrieve the information on 
that particular user from the database, (per pending Claim 1 3), ("Microsoft 
Passport is committed to Safeguarding Security and Privacy" - Examiner 
numbered p.13-15); 

forwarding the information on that particular user to the one requestor over 
the Internet, ("Microsoft Passport is committed to Safeguarding Security 
and Privacy" - Examiner numbered p.13-15); 

wherein receiving a request from a second user's machine, checking for a 
cookie on the second user's machine, sending a query for an available 
key when the second user's machine does not contain any cookie, and 
placing the cookie with the available key on the second user's machine, 
(first-time sign-in), (per pending Claim 14), ("Microsoft Passport is 
committed to Safeguarding Security and Privacy" - Examiner numbered 
p.13-15). 

4. Though Microsoft Passport ™ teaches the use of cookies, ("Microsoft Passport is 
committed to Safeguarding Security and Privacy" - Examiner numbered p. 7 & 15), 
Microsoft specifies that when a user chooses to "sign-out" of Passport, all Passport- 
related cookies from all Passport Web sites are deleted to insure unauthorized people 
are not able to access member information from the same computer. In other words, 
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though Microsoft Passport ™ teaches temporary cookie storage on the client, it does 
not specifically teach permanent cookie storage on the client. 

5. Koneru discloses a "globally unique identifier", (GUID), created by a server when 
a user first accesses a website and stored on the client computer as a "cookie". Upon 
user return to the website, the browser searches local storage to determine if it has a 
cookie for that website. If so, the browser transmits the cookie to the server, (Col. 2, 
lines 12-67 and Col. 3, lines 1-10). Koneru further discloses use of the GUID which also 
prompts the user for user ID and password information, which the system stores as a 
cookie which user ID and password information is subsequently received by a website 
each time the user passes the cookie to the website, (Col. 2, lines 12-67 and Col. 3, 
lines 1-10). 

6. It would have been obvious to one of ordinary skill in the art at the time of 
invention by Applicant to substitute the Koneru method of permanent storage of cookie 
data on the client within the Microsoft Passport ™ system. The motivation to combine is 
found within the Microsoft Passport ™ use of cookies generally and in the fact that 
should a member client not sign off or close the browser, said Passport-related cookies 
in theory are never deleted. For reasons of security, Microsoft Passport ™ teaches the 
destruction of cookie data on the client machine, however, retention of the same would 
have been an obvious, albeit less secure variation. Thus, Claims 1, 9, 12-14, 16 and 17 
are found to be unpatentable over the combined teachings of Microsoft Passport ™ in 
view of Koneru. 
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7. Regarding Claims 2 & 3, the combined teachings of Microsoft Passport ™ in view 
of Koneru are relied upon as noted herein. As noted above, Microsoft Passport ™ 
discloses the storing of information as a different key(s) (Passport(s)) for each user, 
wherein the different keys may represent multiple sets of information pertaining to the 
same user, ("Microsoft Passport is committed to Safeguarding Security and Privacy" - 
Examiner numbered p.13-15). Examiner notes that within Microsoft Passport ™, a user 
may create multiple Passports using multiple sets of information. Thus, Claims 2 & 3 are 
found to be unpatentable over the combined teachings of Microsoft Passport ™ in view 
of Koneru with motivation to combine as noted herein above relative to Claims 1,9,12- 
14, 16 and 17. 

8. Regarding Claims 4, 5, 1 1 & 19, the combined teachings of Microsoft Passport ™ 
in view of Koneru are relied upon as noted herein. Microsoft Passport ™ further 
discloses a security means wherein a requestor must be authorized by the user in order 
to obtain information about the same, (per pending Claims 4, 1 1 & 19), ("Microsoft 
Passport is committed to Safeguarding Security and Privacy" - Examiner numbered 
p.13-15). Examiner finds that the use of a user-supplied password, (per pending Claims 
5 & 1 1 ), would have been obvious in view of the fact that Microsoft Passport ™ does not 
allow access to user information without user-controlled authorization, which 
authorization would obviously include a user-supplied password verification means. 
Thus, Claims 4, 5, 1 1 & 19 are found to be unpatentable over the combined teachings 
of Microsoft Passport ™ in view of Koneru with motivation to combine as noted herein 
above relative to Claims 1, 9, 12-14, 16 and 17. 
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9. Regarding Claims 6, 10 and 20, the combined teachings of Microsoft Passport ™ 
in view of Koneru are relied upon as noted herein. Koneru further discloses the use of 
ActiveX controls, Java applets and VB Scripts as inserted into HTML documents, (Col. 

1 , lines 39-46). As Koneru utilizes HTML, Examiner finds that the use of XML for the 
sending of information would have been obvious. Thus, Claims 6, 10 & 20 are found to 
be unpatentable over the combined teachings of Microsoft Passport ™ in view of 
Koneru with motivation to combine as noted herein above relative to Claims 1, 9, 12-14, 
16and 17. 

10. Regarding Claims 7, 15 and 18, the combined teachings of Microsoft Passport ™ 
in view of Koneru are relied upon as noted herein. Microsoft Passport ™ further 
discloses the receiving of new information on the user from the requestor and updating 
the database with the new information, ("Microsoft Passport is committed to 
Safeguarding Security and Privacy" - Examiner numbered p.13-16). Examiner notes 
that a user may update Passport profile information at any time. Moreover, Examiner 
finds that emails sent on behalf of participating websites could obviously include 
requests for additional or updated user information for a variety of purposes, which 
could obviously be used to update or enhance user information. Thus, Examiner finds 
that it would have been obvious for a user or administrator to update user information 
per the respective user or website request. Thus, Claims 7, 15 and 18 are found to be 
unpatentable over the combined teachings of Microsoft Passport ™ in view of Koneru 
with motivation to combine as noted herein above relative to Claims 1, 9, 12-14, 16 and 
17. 
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1 1 . Regarding Claim 8, the combined teachings of Microsoft Passport ™ in view of 
Koneru are relied upon as noted herein. As noted above, Microsoft Passport ™ selects, 
(creates), an available key, (Passport), for the user and supplies the same to the 
requestor for communication with the user. Moreover, it is also noted above that within 
Microsoft Passport ™, said keys are only temporarily stored on the user's machine as 
cookies, whereas, the permanent storage of cookies on a user machine is taught by 
Koneru. The motivation to combine the teachings of Microsoft Passport ™ with the 
cookie storage functionality of Koneru is also noted herein above relative to Claims 1 , 9, 
12-14, 16 and 17. Thus, Claim 8 is found to be unpatentable over the combined 
teachings of Microsoft Passport ™ in view of Koneru. 



12. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure: 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Arrienne M. Lezak whose telephone number is (703)- 
305-0717. The examiner can normally be reached on M-F 8:30-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David A. Wiley can be reached on (703)-308-5221. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 



Conclusion 



Yahoo! Wallet ™, (Yahoo! Privacy Center), August 15, 2000. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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